Defending Against Authentication Attacks

We don’t yet have all the details, but we have enough to prompt a reminder to those who build applications of any type–especially web applications–that there are multiple authentication surface areas that you must secure when defending your app. ~ via